San Francisco New York I[e),avie “Shanghai _ Berlin - |[eyalelo 


These are confidential sessions—please refrain from streaming, blogging; or taking pictures -,. 
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Paul Marcos 
App Services Evangelist 
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Push updates AirDrop from Activity sheet 


3D map view 
BYA(@ COLKOLU LALO ME KNX <1 MO LO)UUAILOXELEKS 


Clelnemaealiceliaks 


UlKit Dynamics 
atcgaele)oxelelelle 
Guided Access API 
iS Dp r it e Kit Multipeer connectivity 
Directions API 


60fps video capture 


Custom video compositors 


iBeacon New Core Image filters Multitaskin Gg 


Automatic Configuration 


IT<Tel alareltere \yar-Ken/-] alec aalslales 
=) ate 10) (=m=),4 02) d(=) al@omavalarclalesvaarslales 


Xe (=) aver: 


Xe (=) aver: 


This item is over 100MB. 
Paddle Mania 3000 will not 


download until you connect to Wi-Fi. 


Minimizing Install Time 


(_) Take inventory 
(_) Use compression 
( ) Download things later 


Take Inventory 


zm @) olla mY(el0|ar-]0)omelelatel(-miamallacelsis 


Take Inventory 


mm @) olla mY(ol0|ar-]0)omelelatel(-mlamalacelsis 
- Review every file 


Take Inventory 


mm @) olla mY(ol0|ar-]0)omelelatel(-mlamalacelsis 
- Review every file 
Gay. lam alelehy= 

= READMEs, .psd, .h and .m files 

- Stray files dragged into Xcode 


Take Inventory 


mm @) olla mY(ol0|ar-]0)omelelatel(-mlamalacelsis 
- Review every file 
¢ Clean house 
= READMEs, .psd, .h and .m files 
- Stray files dragged into Xcode 
- Obsolete resources 


Take Inventory 


mm @) olla mY(ol0|ar-]0)omelelatel(-mlamalacelsis 
- Review every file 
¢ Clean house 
= READMEs, .psd, .h and .m files 
- Stray files dragged into Xcode 
- Obsolete resources 
¢ Use resizable images 


Take Inventory 


mm @) olla mY(ol0|ar-]0)omelelatel(-mlamalacelsis 
- Review every file 
Gay. lam alelehy= 
= READMEs, .psd, .h and .m files 
- Stray files dragged into Xcode 
= Obsolete resources 
¢ Use resizable images 
¢ Dispose of the trash 


Use Compression 


¢ Video 
= H.264 
¢ Audio 
= AAC or MP3 for long tracks 
= Reduce sample rates from 44.1 kHz to 22.05 kHz 


Use Compression 


¢ Video 

= H.264 
¢ Audio 

= AAC or MP3 for long tracks 

= Reduce sample rate from 44.1 kHz to 22.05 kHz 
¢OpenGL ES 

= Consider using PVRIC - 4 bits per pixel 


Minimizing Install Time 


CEL <n aucialcolay 
@) Use compression 
( ) Download things later 
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¢ May not be appropriate for all apps 
aN OM-i1 a0 | (ome asi i\.21 Mm KOlMerlAVlaremealiare nme] e 
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¢ May not be appropriate for all apps 
aot 1 ae | (ome lai iio Mm KOlmerlAUlaremealiarenmele 
a Nelo ksmae)aale)(=>d18y 

= Need to represent status in UI 

= Have to handle cases of missing assets 

= Manage disk space 

- Complicates testing matrix 


NX =) a Mey Lellale meyer) ive | (a5 


¢ After first launch 
= Platform specific assets 
- 3.5" versus 4" iPhone 
- iPad 2 versus iPad with Retina Display 


NX =) a Mey Lellale meyer) ive | (a5 


¢ After first launch 
= Platform specific assets 
- 3.5" versus 4" iPhone 
- iPad 2 versus iPad with Retina Display 
¢ Lazily as user approaches need for them 
= Levels ina game 
: Include first set, then download more as player progresses 


syle colcelelaremie-laniici 
Overview 


syle colcelelaremie-laniici 
Overview 


evi =) AV/ (Goma COME) O)(el- [ome lalemeleuualler-lemer-lt. 
¢ Transfer done out of process 


syle colcelelaremie-laniici 
Overview 


asi) AVA (@ = COMO] ©) (0 l<Le me] ale Me le\ualler-le merit. 
¢ Transfer done out of process 

- App can suspend or be terminated 

am [ales)avelsre mre) mi r-lce [=~] anole lalame)mel-lt. 

- You get relaunched when transfers complete 
¢ Initiate using NSURLSession 


NSURLSession 


Talidrldlare Mm ey-le.celgelelavemere)iualtey-le 


// Create our session configuration 


NSURLSessionConfiguration x*config; 
config = [NSURLSessionConfiguration backgroundSessionConfiguration:@"MyOtherAssets" |; 


NSURLSession 
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// Create our session configuration 


NSURLSessionConfiguration xconfig; 
config = [NSURLSessionConfiguration backgroundSessionConfiguration:@"MyOtherAssets"] ; 


// create the background session 
self.session = [NSURLSession sessionWithConfiguration:config delegate:self 


delegateQueue: [NSOperationQueue mainQueue] ]; 


NSURLSession 
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// Create our session configuration 


NSURLSessionConfiguration xconfig; 
config = [NSURLSessionConfiguration backgroundSessionConfiguration:@"MyOtherAssets"]; 


// create the background session 
self.session = [NSURLSession sessionWithConfiguration:config delegate:self 
delegateQueue: [NSOperationQueue mainQueue] ]; 


NSURL xremoteURL = ... // URL to asset 


NSURLSessionDownloadTask xtask = [self.session downloadlaskWithURL: remoteURL] ; 


NSURLSession 
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// Create our session configuration 


NSURLSessionConfiguration xconfig; 
config = [NSURLSessionConfiguration backgroundSessionConfiguration:@"MyOtherAssets"]; 


// create the background session 
self.session = [NSURLSession sessionWithConfiguration:config delegate:self 
delegateQueue: [NSOperationQueue mainQueue] ]; 


NSURL xremoteURL = ... // URL to asset 


NSURLSessionDownloadTask xtask = [self.session downloadTaskWithURL: remoteURL] ; 


// Tasks are created paused, so resume it to start download 
[task resume]; 


NSURLSession 


¢ Tasks support suspend, resume, cancel 
ma AVdatsramerolan) ©)(siccema] ©) OM cael anlsrem lam ey-el<elcelelate 


— (void)application:(UIApplication *)application 
hand LeEventsForBackgroundURLSession: (NSString *)identifier 
comp letionHandler: (void (*)())completionHandler; 


¢ Re-establish session, handle results 


DY=i(-TeF- 1 (=m Melakiel=)e-1a (eae 


msl ale) aar-]anvelelalmemalaatomcomar-larellomeocielies 
"Inspect backgroundTimeRemaining 

a oI =10| cm OMG] | @e)anl o)(-iale)amar-lalel(=is 
- May be terminated if you fail to 

¢ Be aware of Data Protection 
am \VrchVau OL om dUlalaliale MYZall(oMelcaVs (om km (elel care 


= Keychain items and files may not be 
available 


9:41 AM 


Enter Passcode 


seem 


1 Ke) diate m DXo) nial (ey-(e(-16 Mm By hee 


¢ NSURLSession holds data temporarily 
- To keep it, move it into your sandbox 
¢ Adhere to iOS Data Storage Guidelines 
= App Review takes these into consideration 


¢ To exclude from backup, set NSURLISExc LudedFromBackupKey 


NSURL *xmyURL = ... // Local file URL in app sandbox 
BOOL success = [myURL setResourceValue:@YES 
forKey:NSURLISExc ludedFromBackupKey error:&error]; 


Minimizing Install Time 


CEL <n aucialcolay 
@) Use compression 
C mbyeyizal(ev-te maatinreaclecli 


syle colcolelavemie-laciie: 
Recap 


¢ Clean up, compress, and possibly split up files 
¢ Use NSURLSession 

am viol@1.<e] cole] ale mul e)(ey-Lem-]aremele)uialley-le 

mame idelc-me)m meluraler-lalelamarciaive)aqiare 
Ohm D)-)e- Ws ice) ¢-le(ome lel (elslalses 

= Exclude files from backups 
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¢ New background modes mines 


TQAO08 


App Snapshot Update Test 
AppDelegate.h 

.m AppDelegate.m 

| Main_iPhone.storyboard 


| Main_iPad.storyboard 
-h) ViewController.h 
ViewController.m 
Images.xcassets 
Supporting Files 
App Snapshot Update TestTests 
Frameworks 
Products 


Background Fetch.xcodeproj 


Build Background Fetch: Succeeded | Yesterday at 10:17 PM 


| ) Background Fetch 
Back...Fetch 4 General 


In-App Purchase 


Maps 


Background Modes 


Audio and AirPlay 
Location updates 
Voice over IP 
Newsstand downloads 
External accessory communication 
Uses Bluetooth LE accessories 
Acts as a Bluetooth LE accessory 
WV Background fetch 
v¥ Remote notifications 


Steps: ¥ 


Inter-App Audio 


Keychain Sharing 


Build Settings 


LOS WA Uliniesky qare 


of New oy-le.colcolerare aarerel=ss Background Modes 
¢ Available to all apps 


Audio and AirPlay 

Location updates 
° Power saarelat Voice over IP 
Newsstand downloads 
External accessory communication 
Uses Bluetooth LE accessories 
Acts as a Bluetooth LE accessory 
¥ Background fetch 


J Remote notifications 


a{-)aarelecm \reldiile@-idlelak 
Overview 


¢ Push delivered to app 
= Even when not frontmost 


- If alert or sound in push payload deen, pees your turn!” 


content-available: 1 


= Delivered to app when user notified 


¢lfno alert or sound 


c: ¢ aps { 
Silent push, user not notified Goran ouat ania 
t 


= May be throttled 


syle Colcelelalemm-inea 


Overview 


©) 0) oXo)aculalinyacemi-1cel amee)alc-lalaniamey-le.colcelulare 
= Fetch latest game state or social feeds 
aU) oXe[-1Kom-] ©) Oyar-) os)are)! 


syle Colcelelalemm-inea 


Overview 


©) 0) oXo)aculalinyacemi-1cel amee)alc-lalaniamey-le.colcelulare 
= Fetch latest game state or social feeds 
aU) oXe[-1Kom-] ©) Oyar-) os)are)! 
¢ Initiated by iOS 
= Based on previous usage 
- At opportune times 
a bos ©) X21 OYo] c=10 COM Al AM [aMmUal=m oy-[e..<olcolulalemiialsameli(@\icre 


jAN'e) os )\ di Kel alt=) aes yar-) oialel a 


oo lly el 


gem 


—— 
a 
<= 


Uy exer ldlarem@e)aic=vane 


a @-) | ero)an} ©)(=1810) am at-1avel (sy ar-kevele) am-hom oless-1] 0) (= 
¢ Keep fetches small 

= Use background transfers for large data 
m O) GitonUki-m ©) e\-10\Ci maa 
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9:41 AM elem 


¢ Be aware of Data Protection Enter Passcode 


Or J Okag OE 3. 


= May be running when device is locked 


= Keychain items and files may not be 
available 


Multitasking 
Recap 


sm a1] OY,0) 0) ar] ©) ©)-tr-1 010 McVaT-] ©)-010) M0] OM KOMel-1K— 
¢ Remote Notifications 

mes) (<1 a] OLUb) alr-] ale mm of- (el .celcelulalemale)ajileclalelars 
wa y- ele) celul ale micicea 

om U] ofor- tome] al=t-(e Me)mr-lelalea 
¢ Be aware of running when device is locked 


Related Sessions 
syle colcolulalemic-lavicsew-lacemiileliaie-ki dare 


What's New with Multitasking 


What's New in Foundation Networking 


meclanteaiiela.< 
Session 204 


oe) = Os) 
Session 705 
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Security and Privacy 


=e 101m Dy-lalevelre. 
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Security Checklist 


@ericuaccaren 
(_) Secure Transport 
Qsaetieneereliare 


Privacy Checklist 


(_) Identifiers 
() Data Isolation 
( ) Data Collection 


4, 
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— iExplorer 


4 f=] OO so | |ml | oO * 
Back View Mode Quick Look Action 


0 Paul's iPhone A iExplorer § Paul's iPhone @B Apps Ey wwoc > (oj Library > (5 Preferences 


Name File Type Size Date Modified 
Al Media DDL IVeWs 9/7/13, L044 AW 


developer.apple.wwdc-Release.plist 


BofA 7/24/13, 3:29 PM 
nee EJ Dropbox 9/19/13, 1:49 AM 
>‘) Backups fi Find Friends 8/22/13, 3:39 PM 
Mn O Mares) © Google Maps 8/28/13, 11:11 AM 
Books 9/17/13, 11:32 PM 

> @ ‘Cioud KQED 7/10/13, 7:26 AM 
[Q Books () PennyTalk 9/17/13, 10:44 AM 

> 7 Media Library [5] Skype 9/19/13, 1:49 AM 
Tokyo 9/19/13, 1:49 AM 

> JK Bookmarks Ry united 9/17/13, 10:44 AM 


a Browse iTunes Backu E§wwoc 7/10/13, 7:25 AM 
nes ps 


| ) Documents 475 kB 7/17/13, 6:33 AM 

> F) Paul Danbold's iPad WWDC-2013.sqlite SQLITE 442 kB 6/11/13, 10:25 AM 
> 2) Paul Danbold’s iPad WWDC-2013.sqlite-shm SQLITE-SHM 32 kB 7/17/13, 6:33 AM 
WWDC-2013.sqlite-wal SQLITE-WAL 7/17/13, 6:33 AM 

> "© Paul Danboid's iPhone (Bi Library 10 kB 7/10/13, 7:25 AM 
> 2) Paul Danbold's iPod (Caches 68B 7/10/13, 7:24 AM 


|) Cookies 7 kB 7/1/13, 2:10 PM 
Cookies. binarycookies BINARYCOOKIES 7 kB 7/1/13, 2:10 PM Size: 1kB 
> ©) Paul's iPhone LijPreferences 1 kB 7/10/13, 7:25 AM Last Modified: Jul 1, 2013, 2:10 PM 
~ -GlobalPreferences.plist PLIST 64B 7/10/13, 7:25 AM Type: PLIST 
a com.apple.PeoplePicker.plist PLIST 68B 7/10/13, 7:25 AM Location: /Library/Preferences 
com.apple.ist.ds.appleconnect.mo... PLIST 172B 6/6/13, 1:51 PM 
© Biceveloper applewndc-Release plist [PUST | kB) 7/1/13, 2:10 PM 
_ )SyncedPreferences 1 kB 7/10/13, 7:25 AM 
developer.apple.wwdc-Release.plist PLIST 1 kB 7/10/13, 7:25 AM 
LD WWDC.app 7/10/13, 7:24 AM 
TunesArtwork 91 kB 7/10/13, 7:24 AM 
Tunes Metadata.plist 2 kB 7/10/13, 7:24 AM 


> ©) Paul's iPhone 


LJjitmp 68B 7/10/13, 7:25 AM 
“% Y! Search 7/10/13, 11:26 AM 
yelp 9/6/13, 7:00 PM 

YouTube 8/20/13, 9:38 PM 
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[data writeToFile: filePath options: @SBateWriétnoFijeProtectionComplete 
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Data Protection Classes 


¢ Keychain: 


"kSecAttrAccessiblewWhenUn Locked, 
kKSecAttrAccessibleAfterFirstUn lock, 


¢ NSFileManager and Core Data: 


"NSFileProtectionComplete, NSFileProtectionComp leteUnLlessOpen, 
NSFileProtectionComp LeteUntilFirstUserAuthentication, 


as) DY 1 tsb 


*NSDataWritingFileProtectionComplete, 
NSDataWritingFileProtectionCompleteUnlessOpen, 
NSDataWritingFileProtectionComp LeteUntilFirstUserAuthentication, 


Keychain Access When Device is Locked 


¢ Use kSecAttrAccessibleAfterFirstUnlock for items required while running in the 
oy-le.<o]celelare 


¢ Mitigate risks by making less protected items read-only and delete them after 
Xo) atom Ol a(ele me) malanl= 


¢ Use derived key (e.g. PBKDF#2) instead of user’s password 


File Access When Device is Locked 


¢ Use less secure protection class for data acquired in background 
" NSFileProtectionCompleteUnlessOpen or 
= NSFileProtectionCompleteUntilFirstUserAuthentication 


¢ Later, when device is unlocked, upgrade the protection class or merge newly 
acquired data into a protected file 


Sy arelalcolalyéiavemc-aear-liamicsaal 


¢-ltems without kSecAttrSynchronizable = kCFBooleanTRUE are not 
synchronized (default) 


¢ Limited to passwords (kSecC LassGenericPassword and 
kSecC LassInternetPassword) 


¢ For shared, synchronized items, use the same kSecAttrAccessGroup name 


Security Checklist 


@) Data Protection 
(_) Secure Transport 
Qsaetieneereliare 


Privacy Checklist 


(_) Identifiers 
() Data Isolation 
( ) Data Collection 


Secure Transport 


Al=mCrorolema(-r-kxe]amce) msi-\e0lc-m\(-1aela dare 


Charles 3.8 - Session 1 * 
w 
Structure 


RC  Mthd Host Path Duration Size Status 
200 GET notify4.dropbox.com:80 /subscribe?host_int=319214814&ns_map=16481928... 32868 ms 570 bytes Complete 


Mi Co... |mservice.bankofamericac..) |__| 50688 ms 46.93 KB Complete | 


200 GET EVSecure-ocsp.verisign.com /MFYWVKADAGEAMEOwSzB)JMAKGBSsOAWIaBQAEFEWn1... 691 ms 2.53 KB Complete 
200 GET EVSecure-ocsp.verisign.com /MFYWVKADAGEAMEOwSzB)JMAKGBSsOAwlaBQAEFLnpso... 694 ms 2.44 KB Complete 
200 GET notify4.dropbox.com:80 /subscribe?host_int=319214814&ns_map=16481928... 44840 ms 570 bytes Complete 


Filter: Settings 


Overview Request eet Summary Chart Notes 


1 QMwq—eC° Faui ~H** f ‘ahe-+°031¢ RA, ,owlp{—=bEoETALc$0’x 'G0de"~ “4 0-e0Ca0Clizt=ZX6; “tlAd{-70 *UHU"OAsS10 UUS 
10U 

2 VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https:/ /www.verisign.com/rpa (c)061402U+VeriSign Class 3 Extended Validation SSL 
CAO 1302150000002 140216235959Z0C+10 +C7<US10 +C7<Delawarel10UPrivate Organization10U29274421 0 UUS10 U60603 


10UIllinois LOUChicago10U 135 S La Salle St1$0"U 
3 Bank of America Corporation10U Network Infrastructurel1#0!Umservice.bankofamerica.com0C"0 *UHU~COC 
4 COEHRA>mTLhF  C9GO4€E™ +r, ¢4¢#my@§-syz id J=\Oajl fBOU*AW:¢[! 4©a/Y1{fd 
5 AtVg *:1i§*PiC-U|@eay\ A g€rmE]yOGQM"y3 * Oa-KoEd|A&aw j6fyVé o"@cejOdftyaSe  fAIV=.Y™£aa...5€,a° O7[T'E>2AQ*$ ,c&SiOcaH9g , CU—+> 0 aBZR 
\lz€j*G+¢7l7y 
6 AS™’¥rl#BCE o3A°z\l6 Ask £CIOCEQeUA0\ Ceib-rest.bankofamerica.comC"mservice-darkpod.bankofamerica.comCmservice.bankofamerica.com0 U00 
UouS1af]B1 > 
7 flu,§+6 -@OU~ +0BU;0907+5+3U Lhttp:/ /EVSecure-crl.verisign.com/EVSecure2006.cri0DU =0;09 ~UHU E0*0(+https:/ /www.verisign.com/cps0 
U%0++0U#0A , aP fGm%Z{UOO0iceEXkCO|+p0n0-+O0U!thttp:/ /EVSecure-ocsp.verisign.com0=+0U Lhttp:/ /EVSecure-aia.verisign.com/E 
VSecure2006.cer0 *UHU” Ci rdl<TA6~ p<aD~\a\ 1j)E"%HX&0y 
B F°D«" A'@O2e)EXY: dULEI-iw€]]/&OFi=%ollGr Qe “Vy 
9 /;iyaf=>#A=VJOA'al* 55% ONEC4eU&"A luznlFV7i- #fLev&6>+0-<U,°-MCWEVGeG@e @<<-c” £4,/P 6-6A°MS BtA~h/E @8/f«%>A= >O 
eSpIWSY#7fleOV=3/E:=0kt-d64|R=%%?, = £W(3) rr EOC%OCAT[WYAN-A«'32i)(kO *UHU"0A 10 UUS10U 
10 VeriSign, Inc.10U VeriSign Trust Network1:08U 1(c) 2006 VeriSign, Inc. - For authorized use onlyl1EOQCU<VeriSign Class 3 Public Primary Certification 
Authority - G50 061108000000Z 161107235959Z0As10 UUS10U 
11 VeriSign, Inc.10U VeriSign Trust Network1;09U 2Terms of use at https:/ /www.verisign.com/rpa (c)061402U+VeriSign Class 3 Extended Validation SSL 
CAOC"0 *UHU~COC 
12 Co€tUlG’y,6n+[o#anavdu8;ytz¥c £*aH©AUG0Z6 I™%cirb#6° ZT(O= -So"d» ~ Bay FOTeDOxtS"ITOMALll FIA; AUK FEDS 30 s1GJi$ Lr >avxxdl~7A4104-5-<AS 
VUAt4N7~35/e8?PSi(£uf_6RHCFRAICIO” x, /Aqadlhr%éoz{s...mQ” 6A2AUE~= £Ld—N°&e ~ 6Xx-3alh>+'Eoz,/6i~\"" QEC"OCCEOU , aP f Gm%Z{UOOIceEXkC 
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Headers Text | Hex Raw 


GET http://notify4.dropbox.com:80/subscribe?host_int=319214814&ns_map=164819281 4282247213393,321951971 38976657635 ,322917187_69042393923,164832846 2585735145038,189782327_ 1208622775327 l&user_id=1014306 
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TLS 


NSURL xurl = [NSURL URLWithString: @”https:// 
www.nameofmyserver.com/”]; 


NSURLSessionDown LoadlTask *downloadlask = 
self.backgroundSession downloadTaskWithURL: url]; 


[down loadTask resume] : 


Security Checklist 


@) Data Protection 
C \ISieUlccmicclarsereyat 
Qsaetieneereliare 


Privacy Checklist 


(_) Identifiers 
() Data Isolation 
( ) Data Collection 


Secure Coding 


Clang Static Analyzer 


=~ 


(Assetx) LocalizedAssetWithName: (NSString *)name 
inBundle: (NSBundle *)bundle { 

NSString xpath; 

NSString xl; 


path = [Asset pathForAssetName: name 
inBundle: bundle]; 
id a = [[Asset alloc] initWithPath:path] ; 


Ll = [self localizedAssetName: name & 1. Value assigned to 'I' 
inBundle: bundle] ; 
if (!1) & 2. Assuming 'I' is nil 
NSLog(@"unable to localize '%@'", name); 


[a setName:name localized: lL]; & 3. Passing nil object reference via 2nd parameter ‘I’ 
return a; ©) 4. Calling 'setName:localized:' 


localized: (NSString x*)1l { 


C" void)setName: (NSString *)name © 5. Entered call from ‘localizedAssetWithName:inBundle:' 


} 


sL@" LocalizedName"] = lL: €) 6. Value stored into 'NSMutableDictionary' cannot be nil 
es{@"name"] = = name; 


Secure Text Entry 


¢ Marking text as secure 


textField.securefextEntry = YES; 


Text View 


Text 


Color 

Font 
Alignment 
Behavior 


Detection 


Capitalization 
Correction 
Keyboard 
Appearance 


Return Key 


Plain 
Secret message 


Mmm Default 


Helvetica Neue Light 18.0 


WV Selectable 


Vv Editable 


Links Addresses 
Phone Numbers 
Events 

Sentences 

Default 

Default 

Default 


Done 


Auto-enable Return Key 
JV Secure 


Secure Text Entry 


¢ Asking for a user name and password 


Bame Seo 
ale rt . ale rtViewSty le = Logging in first time. 
UIAlertViewSty LeLoginAndPas 


Swordinput; 


¢ Asking for a password 


Enter Password 


What is Paul's password? 


alert.alertViewStyle = 
UIAlertViewSty leSecureTextl 
alelenar 


Purge Sensitive Data 


- Zeroing memory 


bzero(&sensitiveData, sizeof(sensitiveData) ): 


Tamper Detection 


The Fragility of Jailbreak Detection 


op 8 oe eo) 01-1 0 a Ot cd) 9 ee 
if (f '= NULL) ¢{ 

// pirated! now what do we do? 
} 

fclose(f) 


Security Checklist 


@) Data Protection 
C \ISieUlccmicclarsereyat 
C esicrallcen@erellare 


Privacy Checklist 


(_) Identifiers 
() Data Isolation 
( ) Data Collection 


Platform Privacy 


Privacy 


_ Calendars 
Reminders 
= Photos 
p Bluetooth Sharing 


6 Microphone 


(©) twitter 
Ej Facebook 


Advertising 


Restrictions 


PRIVACY: 


Location Services 
Contacts 
Calendars 
Reminders 
Photos 

Bluetooth Sharing 
Microphone 
Twitter 

Facebook 


Advertising 


“Camera” Would Like to Use 
Your Current Location 


Photos and videos will be tagged with 
the location where they were taken. 


Don't Allow 


Identifiers 


UDID Replacement APIs 


elo) of Bic: 
Application ID fale) @ Oletiasirlliecleye 
\V/=} ale (olan Dy Developer Uninstall 


developer's apps 


Erase all Content 


Advertising ID BYavile: and Settings 


Backed Up 


Yes 


Yes 


Yes 


Restores 
Across Devices 


Yes 


No 


Xe 


Other Restrictions 


¢ MAC Address 


RYAS1on 0 \\| oll OO od lO DO | (0 Woon al WMO LOCH NGO) \ ummm olo)damc-idel gam ma@elalir-lale 
value @2:00:00:20:00:20 on iOS 7 


Ua ke) <-lals 
application: didRegisterForRemoteNotificationswithDeviceToken: 
¢ Named Pasteboards 
smsX@0) 0] =10 MN KOMY(010] au =r- lan |B, 


Security Checklist 


@) Data Protection 
C \ISieUlccmicclarsereyat 
C esicrallcen@erellare 


Privacy Checklist 


Cymelniditas 
() Data Isolation 
() Data Collection 


Consent and Transparency 


Consent and Transparency 


< General _ Restrictions € Restrictions Microphone 


PRIVACY: 


Location Services Allow Changes 


“Camera” Would Like to Use 
Your Current Location 


Contacts Don’t Allow Changes 
Calendars 


—— Photos and videos will be tagged with 
the location where they were taken. 


SS 


Photos 


Bluetooth Sharing 
Microphone 
Twitter 


Facebook 


Advertising 


@omaeeaac 


location olate)nes: eo) al telat: Koaaliavelsec calendar 
social bluetooth camera motion 


Purpose Strings 


Data Class 
Location 
mateliess 
@-(claterelas 
Contacts 
Reminders 
Bluetooth 
Wilrelce)e)ate)at= 


Motion 


Talvon elim Cy 

Nhs} eoYer-) de) a] Ukct-le [<1 DXoxxel a] oh a(e)a’ 
NSPhotoLibraryUsageDescription 

NbS\@-] (Jato f-] a1 kyle [=] Di =nxel a] elito)a 
NSContactsUsageDescription 
NSRemindersUsageDescription 
NSBluetoothPeripheralUsageDescription 
NISYIV/IKelxe) ©) ate) arelussy-le [=] Di=nxelglelitela 


NSMotionUsageDescription 


Testing 


moidanlssvle)amolsiiaremxelule|piar-lalemelr-laiccre 
mo)aanlssvle)amel=1/alemyelele|alar-laremelstaliare 
Permission previously denied 


Permission restricted 


Security Checklist 


@) Data Protection 
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Privacy Checklist 


Cymelniditas 
@) Data Isolation 
Qe Prin eo)l(=arre 


Dele m@e)l (adele 


Privacy Policy 


Edit English 


App Name_ ITunes Connect Mobile 


Description The iTunes Connect Mobile app allows developers and 
iBookstore providers to access their catalog and sales data 
anywhere on their iPhone, iPad, or iPod touch. iTunes 
Connect users can also view the metadata for all of their 
titles and set specific titles as Favorites for easier tracking. 


What's New in this Version | Minor bug fix for push notifications. 
Adds support for iPhone 5. 


Keywords iTunes,Connect,Sales,Trends,Apps,Updates,Revenue,Developer, Tools 
Support URL http://itunesconnect.apple.com 


Marketing URL (Optional)  http:// itunesconnect.apple.com 


acy Paley URL(Optora) eee are 
recommended for all apps collecting 
user or device related data, and 
required for apps that offer auto- 
renewable or free subscriptions, or as 
otherwise required by law. 


App Review and Privacy 


17 Privacy 
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ol co (=) mi Komiurateldle) ami melomcsy(sre care 


rN o) om ant \Var-)-),@1(0) mero] «= Mo)mm ol] naam (0) MU lYoMo)u als mr-le[cmeer-1e) ale manlsveat-laliank) me) alhVmroland arom Ol0]/seles\ome) i 
173 complying with applicable children's privacy statutes, but must include some useful functionality or 
entertainment value regardless of the user's age 


Apps that collect, transmit, or have the capability to share personal information (e.g. name, address, 


email, location, photos, videos, drawings, persistent identifiers, the ability to chat, or other personal 
ofl) i ce)aam-manliave) mm aaleriaxeo)anle)\YmViUlaam-] e)e)i(er-]e)(-meall(e/c-1aWcom 0) ahVc-(@Vmcie-]de huss 


Security Checklist 


@) Data Protection 
C \ISieUlccmicclarsereyat 
C esicrallcen@erellare 


Privacy Checklist 


Cymelniditas 
@) Data Isolation 
@) Data Collection 


Wiolasmlalelanarelacele 


Paul Marcos 
App Services Evangelist 
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